CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, strimzi-kafka-operator-fips, seata, nacos-docker, thingsboard, apache-hop, strimzi-kafka-operator, dependency-track, apache-tika, camunda-zeebe, elasticsearch, infinispan, druid, kserve-modelmesh, wazuh-indexer, apache-nifi-registry, pinot,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: neo4j, tez, cassandra, management-api-for-apache-cassandra-5.0, confluent-common-docker, wildfly, ruby4.0-jrjackson, spark, trino, flyway, logstash, confluent-kafka, ruby3.3-jrjackson, apache-nifi, jenkins, sonarqube, thingsboard, gradle, opensearch, ruby3.4-jrjackso...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: neo4j, tez, cassandra, management-api-for-apache-cassandra-5.0, confluent-common-docker, wildfly, ruby4.0-jrjackson, spark, trino, flyway, logstash, confluent-kafka, ruby3.3-jrjackson, apache-nifi, jenkins, sonarqube, thingsboard, gradle, opensearch, ruby3.4-jrjackso...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kube-vip-cloud-provider, secrets-store-csi-driver-provider-aws, dagdotdev, hivemind, nats, linkerd2-proxy-init, confluent-common-docker, octo-sts, container-object-storage-interface, terraform-provider-time, vault-benchmark, kubeflow-katib,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, nemo, kuberay-operator, k8sgpt-operator, vault-k8s, php-fpmexporter, pvc-autoresizer, blob-csi-fips, linkerd2-proxy-init, mattmoor-chainit, memcached-exporter-fips, nvidia-nsight-compute-13.1, nats, gostatsd, terraform-provider-tls-fips, eks-distro-fips,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: gradle-stage0, cassandra-reaper, tez, scala, cassandra, confluent-common-docker, spark, druid...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: gradle-stage0, cassandra-reaper, tez, scala, cassandra, confluent-common-docker, spark, druid...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, tez, strimzi-kafka-operator, apache-nifi, jenkins, confluent-common-docker, wildfly, apicurio-registry, sonarqube, akhq, celeborn, spdx-tools-java, trino, jenkins-plugin-manager, apache-activemq-artemis, opensearch, druid...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, jenkins, jenkins-plugin-manager, strimzi-kafka-operator, camunda-zeebe, trino, celeborn, druid, tez, ghidra, sonarqube, apache-activemq-artemis, apicurio-registry, confluent-common-docker, apache-nifi, wildfly, spdx-tools-java, neo4j,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, kserve-modelmesh-serving, go-bindata, kubevela, kaniko, pluto, grafana-rollout-operator, litefs, cri-tools, kor, crossplane-provider-sql, gobuster, gitsign, emissary, spire-server, vault-k8s, nri-discovery-kubernetes, ctop, kuberay-operator, trillian,...